CVE-2026-1492: CWE-269 Improper Privilege Management in wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
AI Analysis
Technical Summary
The User Registration & Membership plugin by wpeverest for WordPress suffers from improper privilege management (CWE-269) due to accepting user-supplied roles during membership registration without enforcing a server-side allowlist. This allows unauthenticated attackers to assign themselves administrator privileges by specifying the role parameter during registration, effectively bypassing intended access controls. The vulnerability affects all versions up to and including 5.1.2 and has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Potential Impact
Successful exploitation allows unauthenticated attackers to create accounts with administrator privileges, leading to complete compromise of the affected WordPress site. This includes full control over site content, user data, and configuration, severely impacting confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict public access to the registration functionality if possible or disable user registration. Monitor official wpeverest channels for updates and apply patches promptly once released.
CVE-2026-1492: CWE-269 Improper Privilege Management in wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Description
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The User Registration & Membership plugin by wpeverest for WordPress suffers from improper privilege management (CWE-269) due to accepting user-supplied roles during membership registration without enforcing a server-side allowlist. This allows unauthenticated attackers to assign themselves administrator privileges by specifying the role parameter during registration, effectively bypassing intended access controls. The vulnerability affects all versions up to and including 5.1.2 and has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Potential Impact
Successful exploitation allows unauthenticated attackers to create accounts with administrator privileges, leading to complete compromise of the affected WordPress site. This includes full control over site content, user data, and configuration, severely impacting confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict public access to the registration functionality if possible or disable user registration. Monitor official wpeverest channels for updates and apply patches promptly once released.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-01-27T14:38:16.707Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69a66813d1a09e29cbd10aab
Added to database: 3/3/2026, 4:48:19 AM
Last enriched: 4/9/2026, 6:30:10 PM
Last updated: 4/16/2026, 9:55:41 PM
Views: 919
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.